22717 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-43389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi....
Linux Distros Unpatched Vulnerability : CVE-2024-38552
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes...
Linux Distros Unpatched Vulnerability : CVE-2021-47015
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Fix RX consumer index logic in the error path. In bnxtrxpkt, the RX buffers are expected to complete in order. If the RX consumer index indicates an out...
Malicious code in tronapisync (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2768edf78749b023b104efcbfcfedd4d2633480e8d19ee433d467e1b39d2b9ce Package is prepared to exfiltrate private keys, most probably for Tron cryptocurrency. There is no other purpose of the package --- Category: MALICIOUS - The...
MAL-2025-41787 Malicious code in tronapisync (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2768edf78749b023b104efcbfcfedd4d2633480e8d19ee433d467e1b39d2b9ce Package is prepared to exfiltrate private keys, most probably for Tron cryptocurrency. There is no other purpose of the package --- Category: MALICIOUS - The...
Malicious code in httpsyncer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3e9323dbc11b949e9970ead2dcc1c5a7f05348a977591f8c86027ee220c86b62 Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded i...
kernel: powerpc: Fix access beyond end of drmem array
A flaw was found in the Linux kernel, specifically affecting the PowerPC architecture's pseries memory hotplug functionality. The issue arises from the dlparmemoryremovebyindex function, which may access memory beyond the bounds of the drmem logical memory block LMB array when it fails to find a...
CVE-2025-27075
CVE-2025-27075 affects Bluetooth Host on Qualcomm chipsets and involves memory corruption when processing IOCTL commands with larger buffers. Root cause cited is improper handling/validation related to large IOCTL buffers (description aligns with an array/index validation issue). Impact per avail...
CVE-2025-27075 Improper Validation of Array Index in Bluetooth HOST
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host...
CVE-2025-27075 Improper Validation of Array Index in Bluetooth HOST
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host...
CVE-2025-27067 Improper Validation of Array Index in DSP Service
Memory corruption while processing DDI call with invalid buffer...
CVE-2025-27067 Improper Validation of Array Index in DSP Service
Memory corruption while processing DDI call with invalid buffer...
CVE-2025-27067
CVE-2025-27067 is described as memory corruption that occurs while processing a DDI call with an invalid buffer. The entry is linked to Qualcomm chipsets (DSP service) and is scored CVSS v3.1: Local attack, Low attack complexity, Privileges required, no user interaction, with high impact on confi...
CVE-2025-54650
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...
CVE-2025-54650
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...
CVE-2025-54650
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...
CVE-2025-54650
The CVE-2025-54650 entry describes an improper array index verification vulnerability in Huawei HarmonyOS’s audio codec module. The flaw affects the audio decoding function; exploitation could impact decoding behavior as stated by multiple sources. Public assessments show a MEDIUM base score (NVD...
Memory Allocation with Excessive Size Value
Overview github.com/gofiber/fiber is an Express inspired web framework written in Go. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the BodyParser function, which allocates a slice of length idx+1 without validating. An attacker can cause the...
Memory Allocation with Excessive Size Value
Overview github.com/gofiber/fiber/v2 is an Express inspired web framework written in Go. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the BodyParser function, which allocates a slice of length idx+1 without validating. An attacker can cause t...
Fiber 安全漏洞
Fiber is an open source web framework written in the Go language by Fiber Open Source. A security vulnerability exists in Fiber 2.52.8 and earlier versions, which stems from an unvalidated slice index range that could result in an integer overflow or memory exhaustion...